How to break wireless network keys

Its important to ensure that you’re internet connectin is secure, if not people could steal your bandwidth and you’ll be footed with the bill. Heres a guide on how to test the security of your own wireless network.

If you just want to do a quick scan of the area, try using netstumbler.(http://www.netstumbler.com/)
It works with the vast majority of wireless cards and is easy to use.

netstumbler_odt_1b03954d

If you want to see if you can break into your own wireless network,
you’ll need aircrack.

You’ll need a compatible realtek wireless card, such as the Alfa Awus.

Next you’ll need to download the VMWare Player 2.02
(www.filehippo.com/download_vmware_player)
and the aircrack-ng image
(ftp://vmware.aircrack-ng.org/vmware-aircrack-ng-v4.7z).

Once you’ve got wmare installed open up the aircrack image and open
up aircrack.

netstumbler_odt_m4a3b8575

You’ll then be presented with a shell interface simliar to the following:

#######################################

###     Select your interface       ###

1) wlan0

#? 1

#######################################

### Interface to use is : wlan0

Select which ever wireless card you want to use (normally 1). You'll then be given the following menu.

#######################################

### What do you want to do?         ###

### 1) Scan    - Scan for target    ###

### 2) Select  - Select target      ###

### 3) Attack  - Attack target      ###

### 4) Crack   - Get target key     ###

### 5) Config  - Connect to target  ###

### 6) Fakeauth- Auth with target   ###

### 7) Deauth  - Deauth from target ###

###  Reset   - Reset interface    ###

### 9) Monitor - Airmon-ng device   ###

###10) Quit    - Quits airoscript   ###

###11) Test    - Test injection     ###

###12) ChangeMac- Change your MAC   ###

1) 1     3) 3    5) 5    7) 7    9) 9   11) 11  13) 13  15) 15

2) 2     4) 4    6) 6     8   10) 10  12) 12  14) 14

#? 1

Choose 1 to scan for networks, 

#######################################

###     Select AP specification     ###

###                                 ###

###   1) No filter                  ###

###   2) OPN                        ###

###   3) WEP                        ###

###   4) WPA                        ###

###   5) WPA1                       ###

###   6) WPA2                       ###

###                                 ###

#######################################

1

Select 1 to view all wireless networks.

#######################################

###  Select channel to use          ###

###                                 ###

###   1) Channel Hopping            ###

###   2) Specific channel(s)        ###

###                                 ###

#######################################

1

Select 1 to view all channels. The scan will then appear, then press ctrl + c when scanning to end the scan. You will then be returned to the menu.

#####################################

### What do you want to do?         ###

### 1) Scan    - Scan for target    ###

### 2) Select  - Select target      ###

### 3) Attack  - Attack target      ###

### 4) Crack   - Get target key     ###

### 5) Config  - Connect to target  ###

### 6) Fakeauth- Auth with target   ###

### 7) Deauth  - Deauth from target ###

###  Reset   - Reset interface    ###

### 9) Monitor - Airmon-ng device   ###

###10) Quit    - Quits airoscript   ###

###11) Test    - Test injection     ###

###12) ChangeMac- Change your MAC   ###

#######################################

### Airodump closed, select a target###

#? 2

Choose 2 to select your wireless network. Choose the number of your wireless network.

#######################################

### Select Target from this list    ###

 #      MAC                      CHAN    SECU    POWER   #CHAR   SSID

 1)     00:1:35:AA:53:B9        1       WEP     20      15      Wireless1

 2)     00:0F:13:39:FB:48        1       OPN     19      7       NETGEAR

 3)     00:1F:B5:79:A2:66        1       WEP     27      8       Simpsons

 4)     00:AF:9F:14:11:15        6       WEP     32      16       Wireless2

 5)     00:07:3F:A7:08:7B        13      OPN     15      9       belkin54g

 6)     00:1F:0F:15:2E:55        11      WEP     31      14      belkin54g

 7)     00:17:1F:01:A0:B6        11      WEP     41      5       belkin54g

      00:1D:18:EF:20:E1        11      WEP     21      16      belkin54g

 9)     00:18:34:22:D1:0A        2       WPA     22      4       belkin54g

 10)    00:18:64:22:D1:09        2       OPN     21      12      belkin54g

 11)    00:1F:3F:8B:D0:4B        6       WEP     44      16      belkin54g

 12)    00:1C:F0:47:25:90        6       WPA2    23      3       belkin54g

 13)    00:1F:9F:30:21:4B        11      WEP     42      16      belkin54g

 14)    00:11:50:50:B4:F4        10      OPN     18      5

 15)    00:1B:2F:59:08:36        5       OPN     -1      0

 16)    00:14:6C:9E:C0:A4        5               -1      0

 17)    00:12:0E:21:82:D2        9       OPN     10      9

###     Select target              ###

13

Then select 4 on the main menu to break your key.

Then choose 2 so you dont need to scan for any clients.

#######################################

### Do you want to select a client? ###

###                                 ###

###   1) Yes, only associated       ###

###   2) No i dont want to          ###

###   3) Try to detect some         ###

###   4) Yes show me the clients    ###

###   5) Correct the SSID first     ###

###                                 ###

#######################################

2

Then choose 4 for an attack that will break most WEP systems in about 5 minutes.

#######################################

###      WEP CRACKING OPTIONS       ###

###                                 ###

###   1) aircrack-ng PTW attack     ###

###   2) aircrack-ng standard       ###

###   3) aircrack-ng user options   ###

###   4) wesside-ng attack          ###

###                                 ###

#######################################

4

You'll then have the key in a few minutes